Settings

Use Settings page to configure administrative access settings. The page also allows you to configure localization, signature port and change control settings.

To manage the administration settings, go to System Management > System Settings > Administration > Settings > .

Web Admin Settings

HTTP Port

Provide the port number to configure HTTP Port.

By default, the HTTP Port number is 80.

HTTPS Port

Provide the port number to configure HTTPS Port for Secured Web Admin Console access.

By default, the HTTP Port number is 443.

Syslog Port

Displays Syslog port number configured to communicate with managed SFOS.

Syslog (Secure)

Displays Secure Syslog port number configured to communicate with managed SFOS.

Certificate

Certificate that will be used by Administrator of Firewall Manager Web Admin Console.

Figure: Web Admin Settings
Content Distribution Port Settings
Content Distribution Port

Provide the port number to distribute updates for pattern.

Figure: Content Distribution Port Settings
Administrator Password Complexity Settings

Password Complexity can be configured to ensure that administrators are using secure passwords.

  • Enable Password Complexity Settings to enforce following constraints:
  • Minimum Password length. Configure minimum characters required in the password. By default, the Minimum Password length is eight (8) characters.
  • Require minimum one Upper and lower case alphabet
  • Require minimum one number i.e. 0 - 9
  • Require at least one special character e.g. @, $, %
  • Password cannot be same as username.
Figure: Administrator Password Complexity Settings

All the enabled constraints are applied to administrator user password.

Change Control Settings

Enable Change Control
Click to enable Change Control in devices which will be added to Firewall Manager .
Cascade on all managed devices
Click to enable Change Control in all existing managed devices.
Create a system snapshot on of (X) every month
Specify the date on which you want to auto-generate System Snapshot. If you specify ''5'', Firewall Manager will auto-generate system snapshot on 5th date of every month. Deafult value is 1st date of every month.
Figure: Change Control Settings
Sophos Adaptive Learning

The product sends information periodically to Sophos which is used for the purpose of improving stability and protection effectiveness, and prioritizing feature refinements. It includes configuration and usage information, and monitoring threshold data.

Configuration and usage data such as Device information (e.g. model, hardware version), Firmware and License information, Features in use [status, on / off, count] (e.g. configuration applied to 1 or more devices, signature distribution status), amount of configured objects and items (e.g. count of managed devices and groups, count of hosts, policies), Product errors, CPU, memory and disk usage (in percentage), is collected by default.

No user-specific information or personalized information is collected. The information is transmitted to Sophos over HTTPS.

Send Monitoring Threshold data
Monitoring Threshold data includes (enabled by default, excluded when option is de-selected) the following to improve the default threshold settings and alert criteria given with the product across models:
  • Monitoring Threshold values per model.
  • Alert threshold criteria/values per model.
Figure: Sophos Adaptive Learning
Disk Usage Alerts

Use the settings below to configure sending automatic email alerts to a specified email address, when the hard disk usage of your SFM device exceeds the specified threshold value.

Send Email Alert
Select this to receive email alerts when disk usage exceeds configured Disk Usage Threshold.
Disk Usage Threshold
Enter disk usage threshold value in percentage above which email alerts should be sent.
Current Disk Usage
Displays current available used disk space in percentage.
Note: Three emails will be sent one per day after disk usage exceeds configured Threshold Value.

For virtual SFM once the disk usage exceeds the configured Threshold Value you can increase the size of disk, follow below steps to do so for various virtual machines:

  1. VMware Virtual Machine:
    1. Open VMware Virtual Machine where SFM is deployed.
    2. Click Edit virtual machine settings.

    3. Click Hard Disk 2 then click on Expand....

    4. Enter Maximum disk size as required and click Expand.

  2. Xen Virtual Machine:
    1. Open Xen virtual machine where SFM is deployed.
    2. Switch to Storage tab, right click on disk-2 and select Properties.

    3. Click on Size and Location.
    4. Update disk size as required.

    5. Click on OK to save.
  3. KVM: Disk size for KVM can be increased by using the following command:
    qemu-img resize AUXILIARY-DISK.qcow2 +(disk_size)GB  
    To execute this command, navigate to 'AUXILIARY-DISK.qcow2' file. For example if your file is stored in SFM folder then navigate to SFM ( /home/SFM/) and execute the command (qemu-img resize AUXILIARY-DISK.qcow2 +500 GB).
  4. Hyper-V virtual machine:
    1. Open Hyper-V virtual machine where SFM is deployed.
    2. Go to File > Settings.
    3. Select IDE Controller1 Auxilary Hard disk and click on Edit.
    4. Go to Choose Action > Configure Disk.
    5. Update disk size as required and click on Finish.

Note For hardware SFM devices the disk size cannot be increased.